Re: WINNING NOTIFICATION

2004-06-18 Thread Russell Coker
On Sat, 19 Jun 2004 02:30, [EMAIL PROTECTED] wrote:
> You have lied as far as my winnings I have given what I was supposed to and
> that information is crucial to my identity..I was sent an email that I won
> at my other email address that NOONE knew..I didnt believe it was a hoax..
> I believed it so much that I have given my bank account my ,drivers
> licence, and other crucial information.I even called the NL to speak with

It was all a hoax, any money you have spent has been lost and will never be 
recovered.

Any information that you gave (such as bank account numbers) should be 
changed.  You mention that they called you, it would probably be best if you 
change your phone number so that they can't call you again.

You appear to be in the US, so contacting the FBI is the best thing for you to 
do.  But as more than a million other USians have been fooled in the same way 
as you it's unlikely that the FBI will be able to spend much time on your 
case.

-- 
http://www.coker.com.au/selinux/   My NSA Security Enhanced Linux packages
http://www.coker.com.au/bonnie++/  Bonnie++ hard drive benchmark
http://www.coker.com.au/postal/Postal SMTP/POP benchmark
http://www.coker.com.au/~russell/  My home page


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]



Re: Which Spam Block List to use for a network?

2004-06-18 Thread Russell Coker
On Sat, 19 Jun 2004 00:29, Francisco Borges <[EMAIL PROTECTED]> wrote:
> SpamCop works fine for my own email, where most people are whitelisted,
> but is said [1] not to be suitable for a production environment and what
> we have here is precisely that...

I know of some ISPs that use SpamCop.  It generally works well and has good 
proceedures for removing bogus entries.  I have had my mail server using the 
SpamCop DNSBL for years and had hardly any problems of legit mail being 
rejected.

Below is my Postfix configuration line for anti-spam systems.  SpamCop is 
first because it gets the highest hit rate and the majority of spams get 
discarded from it before even having to query other servers (should be good 
for you as you mention having an over-loaded server).  The DNSBL entries 
below are roughly in order of hit rate - the last few entries catch hardly 
any spam due to duplicate entries with other lists.

By far the most false-positive entries I have had are from 
postmaster.rfc-ignorant.org and abuse.rfc-ignorant.org.  The postmaster list 
gets hotmail.com (and many others), and the abuse list gets yahoo.com (with 
many more others).  I was forced to remove the abuse list from my 
configuration as it got so many hits on non-spam email, and the postmaster 
list is a border-line case.

smtpd_client_restrictions = permit_mynetworks, reject_rbl_client 
bl.spamcop.net, reject_rbl_client dnsbl.sorbs.net, reject_rbl_client 
list.dsbl.org, reject_rbl_client cbl.abuseat.org, reject_rbl_client 
dnsbl.njabl.org, reject_rbl_client sbl.spamhaus.org, reject_rbl_client 
relays.ordb.org, reject_rhsbl_client rhsbl.sorbs.net, reject_rhsbl_client 
dsn.rfc-ignorant.org, reject_rhsbl_client postmaster.rfc-ignorant.org

-- 
http://www.coker.com.au/selinux/   My NSA Security Enhanced Linux packages
http://www.coker.com.au/bonnie++/  Bonnie++ hard drive benchmark
http://www.coker.com.au/postal/Postal SMTP/POP benchmark
http://www.coker.com.au/~russell/  My home page


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]



Re: Lortab

2004-06-18 Thread Nanoohu

H


Re: Lortab

2004-06-18 Thread Nanoohu

H


Re: relay protection for Postfix

2004-06-18 Thread Dave Watkins
Aaron Goulding wrote:

> Okay, there's a lot of talk on -user about spam control, and I'd like
> to make sure my own server is properly secured. Could anyone recomend
> basic steps for Debian STABLE running Postfix for the MTA, to make
> sure it's not being used as a relay point? I want to be able to
> deliever mail from the box itself (to keep SquirrelMail working) but
> other than that, no one should be able to deliver mail through my
> machine.
>
> I figure this is a pretty simple item, and I'm just missing the steps
> in the docs. Thanks in advance!
>
> -Aaron, Dreamchaos.net administrator
>
>
I usually use this

http://www.abuse.net/relay.html

Does quite a number of tests and you can see the results in realtime




i am writing for a friend

2004-06-18 Thread Blueydblndbabe2
He has webtv and for the last 2 weeks he hasn't been able to relpy or compose mail 
I believe since some kind of an upgrade .
Now he can not delete , compose, reply or forward mail .

Is there something you can tell me to help him out , he is frustrated with all of this .
I await your answer .
Thank you 


relay protection for Postfix

2004-06-18 Thread Aaron Goulding
Okay, there's a lot of talk on -user about spam control, and I'd like to 
make sure my own server is properly secured. Could anyone recomend basic 
steps for Debian STABLE running Postfix for the MTA, to make sure it's not 
being used as a relay point? I want to be able to deliever mail from the 
box itself (to keep SquirrelMail working) but other than that, no one 
should be able to deliver mail through my machine.

I figure this is a pretty simple item, and I'm just missing the steps in 
the docs. Thanks in advance!

-Aaron, Dreamchaos.net administrator



Re: relay protection for Postfix

2004-06-18 Thread Dave Watkins
Aaron Goulding wrote:

> Okay, there's a lot of talk on -user about spam control, and I'd like
> to make sure my own server is properly secured. Could anyone recomend
> basic steps for Debian STABLE running Postfix for the MTA, to make
> sure it's not being used as a relay point? I want to be able to
> deliever mail from the box itself (to keep SquirrelMail working) but
> other than that, no one should be able to deliver mail through my
> machine.
>
> I figure this is a pretty simple item, and I'm just missing the steps
> in the docs. Thanks in advance!
>
> -Aaron, Dreamchaos.net administrator
>
>
I usually use this

http://www.abuse.net/relay.html

Does quite a number of tests and you can see the results in realtime


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]



i am writing for a friend

2004-06-18 Thread Blueydblndbabe2
He has webtv and for the last 2 weeks he hasn't been able to relpy or compose mail 
I believe since some kind of an upgrade .
Now he can not delete , compose, reply or forward mail .

Is there something you can tell me to help him out , he is frustrated with all of this .
I await your answer .
Thank you 


relay protection for Postfix

2004-06-18 Thread Aaron Goulding
Okay, there's a lot of talk on -user about spam control, and I'd like to 
make sure my own server is properly secured. Could anyone recomend basic 
steps for Debian STABLE running Postfix for the MTA, to make sure it's not 
being used as a relay point? I want to be able to deliever mail from the 
box itself (to keep SquirrelMail working) but other than that, no one 
should be able to deliver mail through my machine.

I figure this is a pretty simple item, and I'm just missing the steps in 
the docs. Thanks in advance!

-Aaron, Dreamchaos.net administrator
--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]


Re: WINNING NOTIFICATION [SCANNED]

2004-06-18 Thread David Thurman
On 6/18/04 11:30 AM, "[EMAIL PROTECTED]" wrote:

> Your so-called winner
> Lori Berti

Wow!!!

Lori you need to channel that energy.
-- 
David Thurman
The Web Presence Group
http://www.the-presence.com
Web Development/E-Commerce/CMS/Hosting/Dedicated Servers
800-399-6441/309-679-0774




Re: WINNING NOTIFICATION [SCANNED]

2004-06-18 Thread David Thurman
On 6/18/04 11:30 AM, "[EMAIL PROTECTED]" wrote:

> Your so-called winner
> Lori Berti

Wow!!!

Lori you need to channel that energy.
-- 
David Thurman
The Web Presence Group
http://www.the-presence.com
Web Development/E-Commerce/CMS/Hosting/Dedicated Servers
800-399-6441/309-679-0774


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]



Re: WINNING NOTIFICATION

2004-06-18 Thread Lberti29




You have lied as far as my winnings I have given what I was supposed to and that information is crucial to my identity..I was sent an email that I won at my other email address that NOONE knew..I didnt believe it was a hoax.. I believed it so much that I have given my bank account my ,drivers licence, and other crucial information.I even called the NL to speak with Mr Freeman which cost me a good deal of money,and he has also called me.I was asked about a fee and I did contact the  NL ministries they said if a statement was made that I would pay fees after my check was recieved it was all good THEY ASKED ME FOR YOUR INFORMATION AND I DID NOT SEND IT FOR THE REQUEST OF KEEPING MY CONFIDENTIALITY.If I do not recieve the so called winnings within a 2 weeks I will contact the FBI AND FOWARD THE INFORMATION AND COPY OF THE SO CALLED 1 MILLION DOLLAR CHECK.I am a diabetic who relys on much medication to live so each dollar I have I need.I should hope no crimes were committed!!! and if it is real I suppose I am impatient...If this is real then except my apologies

Your so-called winner
Lori Berti


Re: Which Spam Block List to use for a network?

2004-06-18 Thread Jason Lim

> I've used (through notespam) for my own private email, the following
> lists:
> Visi (relays.visi.com);
> ORDB (relays.ordb.org);
> SpamCop (bl.spamcop.net);
> dorkslayers (orbs.dorkslayers.com).

Pretty good list... ecept for dorkslayers.

In general, for an ISP or hosting provider (or anyone who handles large
volumes of email) you should NOT go with the controversial lists on a
global scale, or ones where it is impossible to get out of. The reason
being that you want to minimize false positives, even if this means a few
extra spams get through. You cannot afford to have a CEO's email
"mistakenly" blocked as spam.

The best way to do this is to go with most of the "open relay" and "open
proxy" lists.

So that would be visi and ordb (you already got those) PLUS
opm.blitzed.org and xbl.spamhaus.org. These two are also open proxy lists,
although opm and xbl I think have the same content (so check to make sure,
so you don't do double queries and waste bandwidth and others resources).

> SpamCop works fine for my own email, where most people are whitelisted,
> but is said [1] not to be suitable for a production environment and what
> we have here is precisely that...
>
> [1]:http://www.spamcop.net/bl.shtml

Spamcop is okay... it has some "controversial" blocks such as
Internetseer. I never asked for their email, but they got it somehow...
well, anyway, some say they are hardcore spammers, some not. But Spamcop
in general gets most of the US spam. However, it doesn't seem to catch
much Korean/China spam... so YMMV.

> Since I've only used this sort of thing at "personal email level" I'm
> wondering if anyone here could provide me with information over which
> would be a responsible and unbiased [*] Block List for an
> *international* production environment.

> [*]: Several "Block Lists" seem to be highly biased, if not prejudiced,
> in the sense that they will easily block huge chunks of IP space from
> some countries but will hardly do so for ISPs within other countries.

Certainly avoid ALL country block lists, and block lists that include
large chunks of IPs. This may include SPEWS and SBL. They are okay in a
weighting system (such as with Spamassassin) but not good if you're using
them to block outright (especially Spews and false positives). SBL is
better than Spews, although less aggressive.

Better to do the open relays and proxy blocking at the server level, and
let people block the rest (eg. block all China, block all Asia, block all
Europe, Spews, etc.) in a client/personal level. That is the best solution
we have found.

You can also find a very good list of RBL Spam lists at:
http://www.declude.com/Articles.asp?ID=97

and it even has warnings and brief descriptions. I find it very useful to
keep updated on whats new and whats good.

Hope this helps!

Jas




Legal English online seminar

2004-06-18 Thread Legal-Ease International
Dear Colleague,

We take this opportunity to let you know that from July 12 to July 23, 2004 
Legal-Ease International will hold its world renowned Legal English Seminar on 
the internet. We are offering this seminar for participants that cannot attend 
one of our live seminars around the world. If your business requires you to 
transact business in Legal English, this course will benefit you greatly and 
allow you to conduct business in English with more confidence and effectiveness.
 
Legal-Ease International is a company that specializes in teaching Legal 
English to attorneys throughout the world. Our instructors are American 
attorneys with vast experience teaching these courses. Legal-Ease International 
has taught thousands of people throughout Europe, Asia, Mexico and South 
America. Due to the huge growth of international commerce, the demand for 
attorneys that know the correct language to conduct business and legal 
transactions, and being that English is the language used in most of the 
transactions, it is essential to have a command of Legal English. Our courses 
are focused towards individuals that have a command of the English language, 
but that want to learn legal terms that will enable them to prepare contracts, 
letters and other legal documents.
 
Legal English course contents
- The course will cover the appropriate terminology and structure to be able to 
speak and write in Legal English and draft documents
- The exercises provided will be personally corrected by our experienced 
instructors.
- The course covers a synopsis of the legislative and judicial system of the 
United States
 
Topics covered:
- Commercial Terminology   
- Letters and Contracts
- International Transactions   
- Dispute Resolution
- Corporate Law
 
Participants will receive:
- DIPLOMA 
- WORK BOOK
- LEGAL DICTIONARY

THERE ARE FOUR EASY WAYS TO SIGN UP
1. On the web: www.legalenglish.com  (secured site)
2. Fax personal and company information along with credit card information to 
(212) 656-1192.
3. Mail personal and company information along with credit card information or 
check in U.S. dollars to Legal-Ease International.
4. Wire Transfer. (Bank of America Routing # 053-000-196 Acct # 430-235-465). 
Price: $ 495.00 U.S.D. on or before July 1
$ 595.00 U.S.D. after July 1

Reserve your place now, space is limited. We reserve the right to cancel the 
course and provide a refund. Refunds will be issued if you cancel your 
participation in the course 7 days or more prior to the start of the course. 
There are no refunds after this date. Your payment must be made before the 
first day of the course.
 
Sincerely,
 
Dan Lukins
Legal-Ease International, Inc.
244 Madison Av. # 121
New York, NY 10016
(212)629-1978 fax (212)656-1192
www.legalenglish.com
email: [EMAIL PROTECTED]




Re: Which Spam Block List to use for a network?

2004-06-18 Thread Adrian 'Dagurashibanipal' von Bidder
On Friday 18 June 2004 16.29, Francisco Borges wrote:
[...]
> a Block List [...] that blocks not only blocks huge IP 
> > blocks  /permanently/ but also whole countries  
> (some 25 by default).

ouch.

> We need to use some form of Block List at the connection level,

For a minimal false positive rate I would recommend using greylisting 
first. This will delay some emails (first occurence of every 
IP/sender/recipient tripel) by 10min - 1h (depending on the sender mail 
server), but will instantly block quite a lot of spam and 
viruses/trojans. (Debian: greylistd. Also, postgrey for postfix. Don't 
use the greylist example script that comes with postfix 2.1, see the 
postgrey web site for why).

> I've used (through notespam) for my own private email, the following
> lists:
> Visi (relays.visi.com);

Don't know.

> ORDB (relays.ordb.org);

Good results, but declining over the last months.


> SpamCop (bl.spamcop.net);

Too many false positives. Will happily list MXen of big ISPs.

> dorkslayers (orbs.dorkslayers.com).

Dunno.


After you greylist, put cbl.abuseat.org in place. Very conservative, 
very quick to unlist, but will get a lot of mail.

I also had very good experiences with list.dsbl.org (or .net?).

spews is more aggressive and needs close watching. Probably better not 
use it. (And, on my server, it doesn't catch much that isn't caught by 
abuseat or dsbl anyway, so it's not that important anyway.)

(Hmm. I posted my setup just recently. Perhaps in -security?)

greetings
-- vbi


-- 
All Hail Discordia!


pgpOqvGa9rASV.pgp
Description: signature


Re: WINNING NOTIFICATION

2004-06-18 Thread Lberti29




You have lied as far as my winnings I have given what I was supposed to and that information is crucial to my identity..I was sent an email that I won at my other email address that NOONE knew..I didnt believe it was a hoax.. I believed it so much that I have given my bank account my ,drivers licence, and other crucial information.I even called the NL to speak with Mr Freeman which cost me a good deal of money,and he has also called me.I was asked about a fee and I did contact the  NL ministries they said if a statement was made that I would pay fees after my check was recieved it was all good THEY ASKED ME FOR YOUR INFORMATION AND I DID NOT SEND IT FOR THE REQUEST OF KEEPING MY CONFIDENTIALITY.If I do not recieve the so called winnings within a 2 weeks I will contact the FBI AND FOWARD THE INFORMATION AND COPY OF THE SO CALLED 1 MILLION DOLLAR CHECK.I am a diabetic who relys on much medication to live so each dollar I have I need.I should hope no crimes were committed!!! and if it is real I suppose I am impatient...If this is real then except my apologies

Your so-called winner
Lori Berti


Which Spam Block List to use for a network?

2004-06-18 Thread Francisco Borges
Hello,

#
SOME BACKGROUND:

Due to excess of email delivery requests our email server was getting
jammed; the sysadmin of this one network (not the one my email address
belongs to), IMNSHO irresponsibly and incompetently, downloaded and
started using a Block List from www.spamlist.org, that not only blocks
huge IP blocks /permanently/ but also whole countries (some 25 by
default).

This for a whole faculty inside an international university where about
half of the research staff is foreign. BTW, not only he did that, he
also did not mention it to nobody...

The whole thing backslashed (Surprise!!) and now we don't have any list
in place.

Despite not being my responsibility this does affect my email and since
I'm in position to make recomendations, I'm researching the topic.

#

THE QUESTION:

We need to use some form of Block List at the connection level,

I've used (through notespam) for my own private email, the following
lists:
Visi (relays.visi.com);
ORDB (relays.ordb.org);
SpamCop (bl.spamcop.net);
dorkslayers (orbs.dorkslayers.com).

After dorkslayers started giving false positive to every single query I
made to it, I droped it and never used it again.

SpamCop works fine for my own email, where most people are whitelisted,
but is said [1] not to be suitable for a production environment and what
we have here is precisely that...

[1]:http://www.spamcop.net/bl.shtml

Since I've only used this sort of thing at "personal email level" I'm
wondering if anyone here could provide me with information over which
would be a responsible and unbiased [*] Block List for an
*international* production environment.

[*]: Several "Block Lists" seem to be highly biased, if not prejudiced,
in the sense that they will easily block huge chunks of IP space from
some countries but will hardly do so for ISPs within other countries.

Thank you for your attention,
-- 
Francisco Borges
Alfa Informatica - RuG




Re: Which Spam Block List to use for a network?

2004-06-18 Thread Jason Lim

> I've used (through notespam) for my own private email, the following
> lists:
> Visi (relays.visi.com);
> ORDB (relays.ordb.org);
> SpamCop (bl.spamcop.net);
> dorkslayers (orbs.dorkslayers.com).

Pretty good list... ecept for dorkslayers.

In general, for an ISP or hosting provider (or anyone who handles large
volumes of email) you should NOT go with the controversial lists on a
global scale, or ones where it is impossible to get out of. The reason
being that you want to minimize false positives, even if this means a few
extra spams get through. You cannot afford to have a CEO's email
"mistakenly" blocked as spam.

The best way to do this is to go with most of the "open relay" and "open
proxy" lists.

So that would be visi and ordb (you already got those) PLUS
opm.blitzed.org and xbl.spamhaus.org. These two are also open proxy lists,
although opm and xbl I think have the same content (so check to make sure,
so you don't do double queries and waste bandwidth and others resources).

> SpamCop works fine for my own email, where most people are whitelisted,
> but is said [1] not to be suitable for a production environment and what
> we have here is precisely that...
>
> [1]:http://www.spamcop.net/bl.shtml

Spamcop is okay... it has some "controversial" blocks such as
Internetseer. I never asked for their email, but they got it somehow...
well, anyway, some say they are hardcore spammers, some not. But Spamcop
in general gets most of the US spam. However, it doesn't seem to catch
much Korean/China spam... so YMMV.

> Since I've only used this sort of thing at "personal email level" I'm
> wondering if anyone here could provide me with information over which
> would be a responsible and unbiased [*] Block List for an
> *international* production environment.

> [*]: Several "Block Lists" seem to be highly biased, if not prejudiced,
> in the sense that they will easily block huge chunks of IP space from
> some countries but will hardly do so for ISPs within other countries.

Certainly avoid ALL country block lists, and block lists that include
large chunks of IPs. This may include SPEWS and SBL. They are okay in a
weighting system (such as with Spamassassin) but not good if you're using
them to block outright (especially Spews and false positives). SBL is
better than Spews, although less aggressive.

Better to do the open relays and proxy blocking at the server level, and
let people block the rest (eg. block all China, block all Asia, block all
Europe, Spews, etc.) in a client/personal level. That is the best solution
we have found.

You can also find a very good list of RBL Spam lists at:
http://www.declude.com/Articles.asp?ID=97

and it even has warnings and brief descriptions. I find it very useful to
keep updated on whats new and whats good.

Hope this helps!

Jas


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]



Legal English online seminar

2004-06-18 Thread Legal-Ease International
Dear Colleague,

We take this opportunity to let you know that from July 12 to July 23, 2004 Legal-Ease 
International will hold its world renowned Legal English Seminar on the internet. We 
are offering this seminar for participants that cannot attend one of our live seminars 
around the world. If your business requires you to transact business in Legal English, 
this course will benefit you greatly and allow you to conduct business in English with 
more confidence and effectiveness.
 
Legal-Ease International is a company that specializes in teaching Legal English to 
attorneys throughout the world. Our instructors are American attorneys with vast 
experience teaching these courses. Legal-Ease International has taught thousands of 
people throughout Europe, Asia, Mexico and South America. Due to the huge growth of 
international commerce, the demand for attorneys that know the correct language to 
conduct business and legal transactions, and being that English is the language used 
in most of the transactions, it is essential to have a command of Legal English. Our 
courses are focused towards individuals that have a command of the English language, 
but that want to learn legal terms that will enable them to prepare contracts, letters 
and other legal documents.
 
Legal English course contents
- The course will cover the appropriate terminology and structure to be able to speak 
and write in Legal English and draft documents
- The exercises provided will be personally corrected by our experienced instructors.
- The course covers a synopsis of the legislative and judicial system of the United 
States
 
Topics covered:
- Commercial Terminology   
- Letters and Contracts
- International Transactions   
- Dispute Resolution
- Corporate Law
 
Participants will receive:
- DIPLOMA 
- WORK BOOK
- LEGAL DICTIONARY

THERE ARE FOUR EASY WAYS TO SIGN UP
1. On the web: www.legalenglish.com  (secured site)
2. Fax personal and company information along with credit card information to (212) 
656-1192.
3. Mail personal and company information along with credit card information or check 
in U.S. dollars to Legal-Ease International.
4. Wire Transfer. (Bank of America Routing # 053-000-196 Acct # 430-235-465). 
Price: $ 495.00 U.S.D. on or before July 1
$ 595.00 U.S.D. after July 1

Reserve your place now, space is limited. We reserve the right to cancel the course 
and provide a refund. Refunds will be issued if you cancel your participation in the 
course 7 days or more prior to the start of the course. There are no refunds after 
this date. Your payment must be made before the first day of the course.
 
Sincerely,
 
Dan Lukins
Legal-Ease International, Inc.
244 Madison Av. # 121
New York, NY 10016
(212)629-1978 fax (212)656-1192
www.legalenglish.com
email: [EMAIL PROTECTED]


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]



Re: Which Spam Block List to use for a network?

2004-06-18 Thread Adrian 'Dagurashibanipal' von Bidder
On Friday 18 June 2004 16.29, Francisco Borges wrote:
[...]
> a Block List [...] that blocks not only blocks huge IP 
> > blocks  /permanently/ but also whole countries  
> (some 25 by default).

ouch.

> We need to use some form of Block List at the connection level,

For a minimal false positive rate I would recommend using greylisting 
first. This will delay some emails (first occurence of every 
IP/sender/recipient tripel) by 10min - 1h (depending on the sender mail 
server), but will instantly block quite a lot of spam and 
viruses/trojans. (Debian: greylistd. Also, postgrey for postfix. Don't 
use the greylist example script that comes with postfix 2.1, see the 
postgrey web site for why).

> I've used (through notespam) for my own private email, the following
> lists:
> Visi (relays.visi.com);

Don't know.

> ORDB (relays.ordb.org);

Good results, but declining over the last months.


> SpamCop (bl.spamcop.net);

Too many false positives. Will happily list MXen of big ISPs.

> dorkslayers (orbs.dorkslayers.com).

Dunno.


After you greylist, put cbl.abuseat.org in place. Very conservative, 
very quick to unlist, but will get a lot of mail.

I also had very good experiences with list.dsbl.org (or .net?).

spews is more aggressive and needs close watching. Probably better not 
use it. (And, on my server, it doesn't catch much that isn't caught by 
abuseat or dsbl anyway, so it's not that important anyway.)

(Hmm. I posted my setup just recently. Perhaps in -security?)

greetings
-- vbi


-- 
All Hail Discordia!


pgpnVSRzLJEHQ.pgp
Description: signature


Which Spam Block List to use for a network?

2004-06-18 Thread Francisco Borges
Hello,

#
SOME BACKGROUND:

Due to excess of email delivery requests our email server was getting
jammed; the sysadmin of this one network (not the one my email address
belongs to), IMNSHO irresponsibly and incompetently, downloaded and
started using a Block List from www.spamlist.org, that not only blocks
huge IP blocks /permanently/ but also whole countries (some 25 by
default).

This for a whole faculty inside an international university where about
half of the research staff is foreign. BTW, not only he did that, he
also did not mention it to nobody...

The whole thing backslashed (Surprise!!) and now we don't have any list
in place.

Despite not being my responsibility this does affect my email and since
I'm in position to make recomendations, I'm researching the topic.

#

THE QUESTION:

We need to use some form of Block List at the connection level,

I've used (through notespam) for my own private email, the following
lists:
Visi (relays.visi.com);
ORDB (relays.ordb.org);
SpamCop (bl.spamcop.net);
dorkslayers (orbs.dorkslayers.com).

After dorkslayers started giving false positive to every single query I
made to it, I droped it and never used it again.

SpamCop works fine for my own email, where most people are whitelisted,
but is said [1] not to be suitable for a production environment and what
we have here is precisely that...

[1]:http://www.spamcop.net/bl.shtml

Since I've only used this sort of thing at "personal email level" I'm
wondering if anyone here could provide me with information over which
would be a responsible and unbiased [*] Block List for an
*international* production environment.

[*]: Several "Block Lists" seem to be highly biased, if not prejudiced,
in the sense that they will easily block huge chunks of IP space from
some countries but will hardly do so for ISPs within other countries.

Thank you for your attention,
-- 
Francisco Borges
Alfa Informatica - RuG


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]



Re: Problems with a perl script for postfix

2004-06-18 Thread Carlos L.M.
Thank you hans, I have found the answer.

--- Hans Spaans <[EMAIL PROTECTED]> escribió: > > hi
all,
> >
> >  I´m testing greylisting policy features for
> postfix
> > with postgrey
> (http://isg.ee.ethz.ch/tools/postgrey/).
> > When I try to start this daemon, it returns this
> > error:
> >
> > Bareword "DB_AUTO_COMMIT" not allowed while
> "strict
> > subs" in use at /usr/sbin/postgrey line 184.
> >
> > How can I solve this problem. Thank you very much.
> >
> > P.D: I´m using Debian woody with perl 5.6.1
> 
> Please take a look in the history of the
> postfix-users mailinglist,
> because this was there about a month (maybe two)
> ago.
> 
> Hans
> 
> 
>  



__
Renovamos el Correo Yahoo!: ¡100 MB GRATIS!
Nuevos servicios, más seguridad
http://correo.yahoo.es




未承諾広告※5000円で開業しませんか!

2004-06-18 Thread メディア

(B
(B $BL$>5Bz9-9p"((B $B$4LBOG$JJ}$O:o=|$7$F$/[EMAIL PROTECTED](B
$BEv9-9p$rkM[;T;{ED#8!]#2(B
(B   $BBeI=pJs2=$N;~Be>[EMAIL PROTECTED](%M%k%.!<(B
$B$G$9!#(B5000$B1_$GLB$C$F$k5.J}!"(B
$BI4J9$O0l8+$KG!$+$:$G$9!#0lEY8+$F$/[EMAIL PROTECTED](B
$B(B 
(B   http://hostrecords.sytes.net/
(B  

postgrey [was: Re: Problems with a perl script for postfix]

2004-06-18 Thread Adrian 'Dagurashibanipal' von Bidder
On Thursday 17 June 2004 18.10, Carlos L.M. wrote:
>  I´m testing greylisting policy features for postfix
> with postgrey (http://isg.ee.ethz.ch/tools/postgrey/).

Yo!

Speaking of greylisting: how does postgrey compare to greylistd? (... 
and does anybody know about an ETA for postfix 2.1 in sarge? I heard 
there were some misterious SSL trouble with a recent unstable version, 
so I don't really want to use a version from sid...)

greetings
-- vbi

-- 
Kallisti!


pgp0QYB8xCrS7.pgp
Description: signature


Re: Problems with a perl script for postfix

2004-06-18 Thread Carlos L.M.
Thank you hans, I have found the answer.

--- Hans Spaans <[EMAIL PROTECTED]> escribió: > > hi
all,
> >
> >  I´m testing greylisting policy features for
> postfix
> > with postgrey
> (http://isg.ee.ethz.ch/tools/postgrey/).
> > When I try to start this daemon, it returns this
> > error:
> >
> > Bareword "DB_AUTO_COMMIT" not allowed while
> "strict
> > subs" in use at /usr/sbin/postgrey line 184.
> >
> > How can I solve this problem. Thank you very much.
> >
> > P.D: I´m using Debian woody with perl 5.6.1
> 
> Please take a look in the history of the
> postfix-users mailinglist,
> because this was there about a month (maybe two)
> ago.
> 
> Hans
> 
> 
>  



__
Renovamos el Correo Yahoo!: ¡100 MB GRATIS!
Nuevos servicios, más seguridad
http://correo.yahoo.es


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]



Re: Problems with a perl script for postfix

2004-06-18 Thread Chris Wagner
That indicates an unquoted string, apparently on line 184.  That buglet has
apparently been fixed; or u can look in the file urself and fix the quotes.

At 06:10 PM 6/17/04 +0200, =?iso-8859-1?q?Carlos=20L.M.?= wrote:
>Bareword "DB_AUTO_COMMIT" not allowed while "strict
>subs" in use at /usr/sbin/postgrey line 184.




--
REMEMBER THE WORLD TRADE CENTER ---=< WTC 911 >=--
"...ne cede males"

0100




$BL$>5Bz9-9p"((B5000$B1_$G3+6H(B$B$7$^$;$s$+!*(B

2004-06-18 Thread $B%a%G%#%"(B

(B
(B $BL$>5Bz9-9p"((B $B$4LBOG$JJ}$O:o=|$7$F$/[EMAIL PROTECTED](B
$BEv9-9p$rkM[;T;{ED#8!]#2(B
(B   $BBeI=pJs2=$N;~Be>[EMAIL PROTECTED](%M%k%.!<(B
$B$G$9!#(B5000$B1_$GLB$C$F$k5.J}!"(B
$BI4J9$O0l8+$KG!$+$:$G$9!#0lEY8+$F$/[EMAIL PROTECTED](B
$B(B 
(B   http://hostrecords.sytes.net/
(B  
(B
(B
(B-- 
(BTo UNSUBSCRIBE, email to [EMAIL PROTECTED]
(Bwith a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]